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DETAILED ACTION 

1. A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on March 09, 2009 has been entered. Claims 1-8 
and 28-33 have been examined and are pending. 

Claim Objections 

2. Claims 1, 2, 6, 9, 28 and 29 arc objected to because of the following informalities: claim 
1: lines 7; claim 2: lines 2, 6; claim 3: line 4; claim 6: line 3, 4; claim 28: lines 5, 8; and claim 
29: line 2; claim 30: lines 8; 13, 16; claim 32 line 2, 4; and claim 33, line recite "the intermediate 
device is adapted to provide". The claims do not positively recited a definite action, for 
example, "a remote device providing " and instead they suggest what the remote device is 
"adapted to provide" and it renders the claims ambiguous to distinguish what the device is 
adapted to and not adapted to. Appropriate correction is required. 

Response to Arguments 

3. Applicant's arguments with respect to claims 1-8 and 28-33 have been considered but are 
moot in view of the new ground(s) of rejection. 
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Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the art to which said subject 
matter pertains. Patentability shall not be negatived by the manner in which the invention was 
made. 

5. Claims 1-8 and 28-33 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kaler et al. (hereinafter referred to as Kaler, US Pub No.: 2004/0139322 Al) in view of Lee IV 
et al. (hereinafter referred to as Lee, US Pub, No.: 2005/0188072). 

As per claim 1 : 

Kaler discloses a method, comprising: 

determining security information associated with at least one object of transactions 
wherein the object is to be transmitted from a source device to a target device 
along a transmission .path that includes at least one intermediate device (0049); 

determining if an adjacent intermediate device in the transmission path is adapted to 
provide a level of security (0029); and 

transmitting the object to the adjacent intermediate device in the transmission path in 
response to determining that the adjacent intermediate device is adapted to 
provide the level of security (0110; 0119). 
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Kaler does not explicitly disclose providing a level of security indicated by at least a 
portion of the security information. Lee, in analogous art, however, disclose providing a level of 
security indicated by at least a portion of the security information (0043; security specific policy; 
0054; 0094; level of policy application; 0106-0107). Therefore, it would have been obvious to a 
person having ordinary skill in the art at the time the invention was made to modify the system 
disclosed by Kaler to include a level of security indicated by at least a portion of the security 
information. This modification would have been obvious because a person having ordinary skill 
in the art would have been motivated to do to dynamically construct a protocol to facilitate 
communication between nodes and across multiple nodes and utilize policies associated with the 
nodes to specify protocol properties of the nodes and select a policy expression in a policy 
related to a node by another node to construct a protocol between the two nodes as suggested by 
Lee in (0007). 

As per claim 2: 

Kaler discloses a method, wherein the object is a business object, and wherein 
determining if the remote device is adapted to provide the level of security comprises: 

transmitting to the adjacent intermediate device the transmission path information 

representative of the level of security that is desired (0049); and 
receiving a response from the adjacent intermediate device the transmission path 

indicating that the adjacent intermediate device the transmission path is adapted to 

provide the desired level of security (01 10; 01 19). 
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As per claim 3 : 

Kaler discloses a method, wherein determining the security information comprises 
accessing a header portion of the object (0078; 0079; 0081). 

wherein determining, if an adjacent intermediate device in the transmission path is 
adapted to provide a level of security indicated comprises performing at least one 
of (0016; 0030; 0081,0110): 

transmitting information representative of the level of security that is desired to the 
adjacent intermediate device in the transmission path prompts the intermediate 
device in the device in the transmission path to execute at least one module that 
allows the adjacent intermediate device in the transmission path to provide the 
level of security (0016; 0030; 0081, 0110); and 

comparing the adjacent intermediate device in the transmission path to a list of trusted 
devices in the header portion of the object (0016; 0030; 0081, 0110); 

wherein transmitting the object to the adjacent intermediate device in the transmission 
path comprises transmitting the object to an object handler module in the adjacent 
intermediate device in the transmission path (0039; 0052; 0067); 

wherein the object handler module is a business integration adapter supporting 
connectivity options, the connectivity options comprising at least one of packaged 
applications, custom applications, legacy applications, databases, trading partners' 
system, and public information stores on the internet (0039; 0052; 0067); 

wherein the object handler module supports at least one of event-driven real-time 
synchronous connections, asynchronous loosely coupled connections with trading 
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partners, synchronous on-demand connections to customers and synchronous 
tightly coupled connections to trusted trading partners (0039; 0052; 0067). 

As per claim 4: 

Kaler discloses a method, wherein determining the security information comprises 
determining security information relating to at least one of connection information, class 
information, trusted entities information, and logging capability information (0010; 0043). 

As per claim 5 : 

Kaler discloses a method, wherein accessing the header portion of the object comprises 
accessing at least one header of a Simple Object Access Protocol message (0080; 0081; 0095). 

As per claim 6: 

Lee disclose determining an alternative intermediate device along a different transmission 
path that is adapted to provide the level of security represented in response to determining that 
the adjacent intermediate device in the transmission path is not adapted to provide the level of 
security (0100; identifies any routing assertions). 

As per claim 7: 

Kaler discloses a method, article and apparatus, comprising causing sending a message to 
the adjacent intermediate device in the transmission path instructing the adjacent intermediate 
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device to execute at least one module that allows the remote device to provide the level of 
security (0086). 

As per claim 8: 

Kaler discloses a method, article and apparatus, wherein determining the security 
information comprises determining the security information in response to receiving the object 
from a remote device (0033). 

As per claim 28: 

Kaler discloses a method, comprising: 

receiving, at a first device, a request from a second device desiring to transmit at least one 

object, wherein the request (0049; Figure 5: 534; 546); 
determining if the first device is adapted to provide a level of security represented by the 

security parameter (0029; Figure 5: 534; 546); and 
transmitting an indication to the second device based on determining if the first device is 

adapted to provide the level of security (0110; 0119). 

Kaler does not explicitly disclose providing a portion of security information associated 
with the object. Lee, in analogous art, however, disclose a portion of security information 
associated with the object (0043; security specific policy; 0054; 0094; level of policy 
application; 0106-0107). Therefore, it would have been obvious to a person having ordinary skill 
in the art at the time the invention was made to modify the system disclosed by Kaler to include 
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a portion of security information associated with the object. This modification would have been 
obvious because a person having ordinary skill in the art would have been motivated to do to 
dynamically construct a protocol to facilitate communication between nodes and across multiple 
nodes and utilize policies associated with the nodes to specify protocol properties of the nodes 
and select a policy expression in a policy related to a node by another node to construct a 
protocol between the two nodes as suggested by Lee in (0007). 

As per claim 29: 

Kaler discloses a method, where configuring the first device with at least one module that 
allows the first device the adaptability for providing the level of security (Figure 3: 300; 312). 

As per claim 30: 

Kaler discloses a method, where receiving the data object from the second device. 
(Figure 3: 311) 

As per claim 3 1 : 

Lee discloses a method, wherein at least one intermediate device includes at least a first 
intermediate device and a second intermediate device; 

wherein determining if an adjacent intermediate device in the transmission path is 
adapted to provide a level of security includes determining at the source device, wherein the 
adjacent intermediate device is the first intermediate device (0010; 0021; 0084); 
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wherein transmitting the object to the adjacent intermediate device comprises 
transmitting the object to the first intermediate device, and wherein in response to determining 
that the adjacent intermediate device is adapted to provide the level of security comprises in 
response to determining that the first intermediate device is adapted to provide the level of 
security (0084; 0094); 

further comprising: 

determining, at the first device, if a second device of the plurality of intermediate devices 
that is adjacent the first device is adapted to provide the level of security indicated by at least a 
portion of the security information (0094; 0104; 0108); 

transmitting the object to the second device of the plurality of intermediate devices in 
response to determining that the second device is adapted to provide the level of security (0094; 
0104; 0108); and transmitting the object to the target device (0094; 0104; 0108). 

As per claim 32: 

Lee discloses a method, further comprising determining an alternative intermediate 
device along a different transmission path that is adapted to provide the level of security 
represented in response to determining that at least one of the first intermediate device and the 
second intermediate device in the transmission path is not adapted to provide the level of security 
(0054; 0100). 



As per claim 33: 
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Lee discloses a method, wherein at least one intermediate device includes a plurality of 
intermediate devices; 

wherein determining if an adjacent intermediate device in the transmission path is 
adapted to provide a level of security comprises determining, at a previous device in the 
transmission path, a security level for each intermediate device of the plurality of intermediate 
devices 0084; 0094; 0100); 

wherein transmitting the object to the adjacent intermediate device in the transmission 
path in response to determining that the adjacent intermediate device is adapted to provide the 
level of security comprises transmitting the object to each of the plurality of intermediate devices 
in the transmission path in response to determining that each of the plurality of intermediate 
devices is adapted to provide the level of security; further comprising: transmitting the object to 
the target device 0084; 0094; 0100) 

Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. See the notice of reference cited in form PTO-892 for additional prior art. 

Contact Information 

7. Any inquiry concerning this communication or earlier communications from the 

examiner should be directed to Techane J. Gergiso whose telephone number is (571) 272-3784 
and fax number is 1571) 273-3784. The examiner can normally be reached on 9:00am - 6:00pm. 
If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
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Emmanuel Moise can be reached on (571) 272-3865. The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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